Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File:                     QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier:          PO0hO0TGRbxCBKQkmFwj1Gj8najGscQ0jqbzW8YunmA=
Subject key identifier:   EB:27:09:82:FA:1A:45:62:70:CC:C8:B9:CE:2B:F5:77:D3:3D:52:F2
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer:       /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial:       019FAC3F24A58E7C9D26C0286E14F7DB903D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number:          0791
Signing time:             Wed 29 Jul 2026 05:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:46 +0000
Files and hashes:         1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: Udh8rFbvxJMkDjQv+tRiUlNBnlr/Ep8jE/jGGwf8nRM=)
                          2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:24:a5:8e:7c:9d:26:c0:28:6e:14:f7:db:90:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
        Validity
            Not Before: Jul 29 05:00:46 2026 GMT
            Not After : Jul 30 05:00:46 2026 GMT
        Subject: CN=eb270982fa1a456270ccc8b9ce2bf577d33d52f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:8f:32:36:1a:8c:1a:7c:4b:83:1c:2a:a8:
                    44:71:3c:fd:b6:00:63:3c:06:ee:62:ca:c9:bb:e4:
                    6a:bb:72:e6:83:39:b9:7e:a8:49:e0:08:8c:50:a2:
                    59:b8:a6:96:6f:96:7d:c0:50:9d:00:43:19:66:ab:
                    fb:19:23:34:65:a3:26:a7:0e:fc:88:5e:03:10:6c:
                    72:0e:7a:5c:60:d2:46:bc:ed:db:08:d1:d8:a8:ab:
                    91:8f:0c:29:cc:04:00:e2:50:4e:95:5a:6f:17:4b:
                    55:49:b4:8a:61:ab:dc:c7:42:49:b1:c5:2a:ab:3c:
                    12:d8:d9:c7:3c:e7:27:00:11:bd:c5:58:4d:49:c1:
                    19:b5:7e:a6:a3:aa:fd:e9:40:ac:58:95:fb:26:86:
                    25:e1:54:40:c5:b7:5a:1b:83:e1:a8:7b:5f:0b:9c:
                    3b:2b:01:a7:61:fe:3e:a9:31:30:34:59:ff:b5:0d:
                    2b:96:e8:e9:83:01:66:f5:12:11:dc:7f:87:c7:88:
                    5c:c4:b2:fc:53:ef:05:51:3a:42:d7:0a:54:62:7a:
                    49:eb:6c:e8:79:b5:7d:96:37:c5:bd:65:32:0a:74:
                    d3:06:a6:71:49:41:69:be:75:aa:0a:28:53:a2:d5:
                    7c:ce:47:04:1b:c4:59:0c:bd:da:78:79:34:72:48:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:27:09:82:FA:1A:45:62:70:CC:C8:B9:CE:2B:F5:77:D3:3D:52:F2
            X509v3 Authority Key Identifier:
                keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:e1:6c:0f:53:5f:f7:3c:c8:62:14:f3:7e:88:f7:18:05:
         74:c2:47:af:16:39:84:50:df:ee:0a:a2:23:84:c8:59:f5:14:
         9c:70:3f:6c:8d:50:2e:75:06:24:3b:72:7a:10:b1:3e:05:35:
         22:68:7e:b5:4b:fb:2a:7a:45:06:49:70:5f:6d:ab:a3:f4:6b:
         91:22:ab:6d:fd:1e:94:07:34:30:e9:d2:22:07:8e:04:b2:c1:
         51:3b:2f:f1:18:e7:59:9b:fc:2c:d6:8d:19:fa:af:b6:9c:37:
         18:a9:96:04:44:b0:21:32:d5:d3:e3:b2:40:a8:9b:1b:ab:4f:
         98:83:e4:4a:ad:8c:54:45:2d:25:29:03:fd:f6:73:b2:8e:b9:
         ab:c3:f1:1e:a3:20:c0:68:9e:84:35:d2:af:c2:4b:01:ef:4b:
         6e:6e:f5:fc:c7:72:6a:40:74:0e:04:1b:d8:1e:9d:80:2a:60:
         d9:0a:5f:2c:e0:b6:ee:9f:5c:8e:33:b5:27:93:12:65:94:6c:
         1f:b3:86:98:06:fd:b8:fc:3d:f4:e8:d7:35:bb:dc:d1:28:28:
         d0:0c:d9:3a:59:aa:23:9a:33:aa:61:c7:d3:6d:5f:2c:7f:b3:
         cb:3b:67:32:25:e8:cd:2a:7b:4e:fa:fc:98:72:f1:fa:23:ac:
         e5:14:72:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPySljnydJsAobhT325A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMWM1N2UxOTIxZDMxYTM0YWViZDEyZTUwN2ExMzZmZTA0
NTk4YzYwHhcNMjYwNzI5MDUwMDQ2WhcNMjYwNzMwMDUwMDQ2WjAzMTEwLwYDVQQD
EyhlYjI3MDk4MmZhMWE0NTYyNzBjY2M4YjljZTJiZjU3N2QzM2Q1MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4qPMjYajBp8S4McKqhEcTz9tgBj
PAbuYsrJu+Rqu3Lmgzm5fqhJ4AiMUKJZuKaWb5Z9wFCdAEMZZqv7GSM0ZaMmpw78
iF4DEGxyDnpcYNJGvO3bCNHYqKuRjwwpzAQA4lBOlVpvF0tVSbSKYavcx0JJscUq
qzwS2NnHPOcnABG9xVhNScEZtX6mo6r96UCsWJX7JoYl4VRAxbdaG4PhqHtfC5w7
KwGnYf4+qTEwNFn/tQ0rlujpgwFm9RIR3H+Hx4hcxLL8U+8FUTpC1wpUYnpJ62zo
ebV9ljfFvWUyCnTTBqZxSUFpvnWqCihTotV8zkcEG8RZDL3aeHk0ckhLoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsnCYL6GkVicMzIuc4r9XfTPVLyMB8GA1UdIwQY
MBaAFEMcV+GSHTGjSuvRLlB6E2/gRZjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEt
Y2MzNTNlYmFjYmE2LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEtY2MzNTNlYmFjYmE2
LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfThbA9T
X/c8yGIU836I9xgFdMJHrxY5hFDf7gqiI4TIWfUUnHA/bI1QLnUGJDtyehCxPgU1
Imh+tUv7KnpFBklwX22ro/RrkSKrbf0elAc0MOnSIgeOBLLBUTsv8RjnWZv8LNaN
Gfqvtpw3GKmWBESwITLV0+OyQKibG6tPmIPkSq2MVEUtJSkD/fZzso65q8PxHqMg
wGiehDXSr8JLAe9Lbm71/MdyakB0DgQb2B6dgCpg2QpfLOC27p9cjjO1J5MSZZRs
H7OGmAb9uPw99OjXNbvc0Sgo0AzZOlmqI5ozqmHH021fLH+zyztnMiXozSp7Tvr8
mHLx+iOs5RRy6g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:41 2026 by rpki-client